Download Implementing and Operating Cisco Security Core Technologies.350-701.Lead2Pass.2021-02-11.127q.vcex
| Vendor: | Cisco |
| Exam Code: | 350-701 |
| Exam Name: | Implementing and Operating Cisco Security Core Technologies |
| Date: | Feb 11, 2021 |
| File Size: | 3 MB |
How to open VCEX files?
Files with VCEX extension can be opened by ProfExam Simulator.
Discount: 20%
Demo Questions
Question 1
What are two list types within AMP for Endpoints Outbreak Control? (Choose two.)
- blocked ports
- simple custom detections
- command and control
- allowed applications
- URL
Correct answer: BD
Explanation:
https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20User %20Guide.pdf chapter 2 https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20User %20Guide.pdf chapter 2
Question 2
Which command enables 802.1X globally on a Cisco switch?
- dot1x system-auth-control
- dot1x pae authenticator
- authentication port-control auto
- aaa new-model
Correct answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/nfvis/switch_command/b-nfvis-switch-commandreference/802_1x_commands.html https://www.cisco.com/c/en/us/td/docs/routers/nfvis/switch_command/b-nfvis-switch-commandreference/802_1x_commands.html
Question 3
What is the function of Cisco Cloudlock for data security?
- data loss prevention
- controls malicious cloud apps
- detects anomalies
- user and entity behavior analytics
Correct answer: A
Explanation:
https://umbrellA.cisco.com/products/casb https://umbrellA.cisco.com/products/casb
Question 4
For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two.)
- computer identity
- Windows service
- user identity
- Windows firewall
- default browser
Correct answer: BC
Question 5
What is a characteristic of Dynamic ARP Inspection?
- DAI determines the validity of an ARP packet based on valid IP to MAC address bindings from the DHCP snooping binding database.
- In a typical network, make all ports as trusted except for the ports connecting to switches, which are untrusted.
- DAI associates a trust state with each switch.
- DAI intercepts all ARP requests and responses on trusted ports only.
Correct answer: A
Question 6
Which Cisco product provides proactive endpoint protection and allows administrators to centrally manage the deployment?
- NGFW
- AMP
- WSA
- ESA
Correct answer: B
Question 7
Where are individual sites specified to be blacklisted in Cisco Umbrella?
- application settings
- content categories
- security settings
- destination lists
Correct answer: D
Question 8
Which statement about IOS zone-based firewalls is true?
- An unassigned interface can communicate with assigned interfaces
- Only one interface can be assigned to a zone.
- An interface can be assigned to multiple zones.
- An interface can be assigned only to one zone.
Correct answer: D
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html
Question 9
Which two activities can be done using Cisco DNA Center? (Choose two.)
- DHCP
- design
- accounting
- DNS
- provision
Correct answer: BE
Explanation:
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-andmanagement/dna-center/1-2-1/user_guide/b_dnac_ug_1_2_1/b_dnac_ug_1_2_chapter_00.pdf https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-andmanagement/dna-center/1-2-1/user_guide/b_dnac_ug_1_2_1/b_dnac_ug_1_2_chapter_00.pdf
Question 10
Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?
- RSA SecureID
- Internal Database
- Active Directory
- LDAP
Correct answer: C
HOW TO OPEN VCE FILES
Use VCE Exam Simulator to open VCE files
HOW TO OPEN VCEX AND EXAM FILES
Use ProfExam Simulator to open VCEX and EXAM files
ProfExam at a 20% markdown
You have the opportunity to purchase ProfExam at a 20% reduced price
Get Now!